This repository has been archived by the owner on Sep 24, 2020. It is now read-only.

rebase coreos patches onto v4.8.6#26

Merged

mischief merged 21 commits intocoreos:v4.8.6-coreosfrom mischief:v4.8.6-coreos

Nov 1, 2016

+335-18

Commits on Nov 1, 2016

security, overlayfs: provide copy up security hook for unioned files

rhvgoyal
authored and
mischief
committed
selinux: Implementation for inode_copy_up() hook

rhvgoyal
authored and
mischief
committed
security,overlayfs: Provide security hook for copy up of xattrs for overlay file

rhvgoyal
authored and
mischief
committed
selinux: Implementation for inode_copy_up_xattr() hook

rhvgoyal
authored and
mischief
committed
selinux: Pass security pointer to determine_inode_label()

rhvgoyal
authored and
mischief
committed
security, overlayfs: Provide hook to correctly label newly created files

rhvgoyal
authored and
mischief
committed
selinux: Implement dentry_create_files_as() hook

rhvgoyal
authored and
mischief
committed
Add secure_modules() call

Matthew Garrett
authored and
mischief
committed
PCI: Lock down BAR access when module security is enabled

Matthew Garrett
authored and
mischief
committed
x86: Lock down IO port access when module security is enabled

Matthew Garrett
authored and
mischief
committed
ACPI: Limit access to custom_method

Matthew Garrett
authored and
mischief
committed
asus-wmi: Restrict debugfs interface when module loading is restricted

Matthew Garrett
authored and
mischief
committed
Restrict /dev/mem and /dev/kmem when module loading is restricted

Matthew Garrett
authored and
mischief
committed
acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

jwboyer
authored and
mischief
committed
kexec: Disable at runtime if the kernel enforces module loading restrictions

Matthew Garrett
authored and
mischief
committed
x86: Restrict MSR access when module loading is restricted

Matthew Garrett
authored and
mischief
committed
Add option to automatically enforce module signatures when in Secure Boot mode

Matthew Garrett
authored and
mischief
committed
efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

Josh Boyer
authored and
mischief
committed
efi: Add EFI_SECURE_BOOT bit

Josh Boyer
authored and
mischief
committed
hibernate: Disable in a signed modules environment

Josh Boyer
authored and
mischief
committed
kbuild: derive relative path for KBUILD_SRC from CURDIR

Vito Caputo
authored and
mischief
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

rebase coreos patches onto v4.8.6#26

Commits on Nov 1, 2016

security, overlayfs: provide copy up security hook for unioned files

selinux: Implementation for inode_copy_up() hook

security,overlayfs: Provide security hook for copy up of xattrs for overlay file

selinux: Implementation for inode_copy_up_xattr() hook

selinux: Pass security pointer to determine_inode_label()

security, overlayfs: Provide hook to correctly label newly created files

selinux: Implement dentry_create_files_as() hook

Add secure_modules() call

PCI: Lock down BAR access when module security is enabled

x86: Lock down IO port access when module security is enabled

ACPI: Limit access to custom_method

asus-wmi: Restrict debugfs interface when module loading is restricted

Restrict /dev/mem and /dev/kmem when module loading is restricted

acpi: Ignore acpi_rsdp kernel parameter when module loading is restricted

kexec: Disable at runtime if the kernel enforces module loading restrictions

x86: Restrict MSR access when module loading is restricted

Add option to automatically enforce module signatures when in Secure Boot mode

efi: Make EFI_SECURE_BOOT_SIG_ENFORCE depend on EFI

efi: Add EFI_SECURE_BOOT bit

hibernate: Disable in a signed modules environment

kbuild: derive relative path for KBUILD_SRC from CURDIR